CVE-2017-4936
17.11.2017, 14:29
VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client.Enginsight
| Vendor | Product | Version |
|---|---|---|
| vmware | workstation | 12.0.0 |
| vmware | workstation | 12.0.1 |
| vmware | workstation | 12.1 |
| vmware | workstation | 12.1.1 |
| vmware | workstation | 12.5 |
| vmware | workstation | 12.5.1 |
| vmware | workstation | 12.5.2 |
| vmware | workstation | 12.5.3 |
| vmware | workstation | 12.5.4 |
| vmware | workstation | 12.5.5 |
| vmware | workstation | 12.5.6 |
| vmware | workstation | 12.5.7 |
| vmware | horizon_view | 4.0.0 |
| vmware | horizon_view | 4.0.1 |
| vmware | horizon_view | 4.1 |
| vmware | horizon_view | 4.2 |
| vmware | horizon_view | 4.3 |
| vmware | horizon_view | 4.4 |
| vmware | horizon_view | 4.5 |
| vmware | horizon_view | 4.6 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References